Secure queen's ssh a bit better (password not allowed)

This commit is contained in:
Lillian Violet 2024-03-02 22:01:05 +01:00
parent 80952c7f1d
commit a2c50346f0

View file

@ -28,7 +28,13 @@
boot.tmp.cleanOnBoot = true;
zramSwap.enable = false;
networking.domain = "";
services.openssh.enable = true;
services.openssh = {
enable = true;
# require public key authentication for better security
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
settings.PermitRootLogin = "no";
};
nixpkgs = {
# You can add overlays here